cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
757
Views
5
Helpful
1
Replies

How To Configure VPDN Groups to use Different RADIUS Servers

SiBrasso
Level 1
Level 1

 

Hi

 

The scenario here is I have a VPDN tunnel from 1 broadband provider which is using an old RADIUS and then I have anew VPDN tunnel from a different broadband provider who I want to put on a new RADIUS server.  The long term plan is to move all the broadband connections to the new provider and decommission the old RADIUS as part of the same project.  However I cant see for the life of me where/how I would configure this to happen.

 

Any Help would be greatly appreciated.   I’m doing this on a ASR-1001

 

Thanks

1 Accepted Solution

Accepted Solutions

SiBrasso
Level 1
Level 1

I have resolved this issue by doing the following:

 

Create the RADIUS servers:

 

radius server ISE01

 address ipv4 ###.###.###.### auth-port 1812 acct-port 1813

 timeout 10

 key ####

!

radius server ISE02

 address ipv4 ###.###.###.### auth-port 1812 acct-port 1813

 timeout 10

 key ####

 

Now create a group with those servers in

aaa group server radius VPDN-NewISE-Radz

 server name ISE01

 server name ISE02

 

Now create an authentication list with that group in

aaa authentication ppp NewISERadzAuthList group VPDN-NewISE-Radz none

 

Now add this authentication list to the Virtual-Template

interface Virtual-Template3

ppp authentication chap NewISERadzAuthList

 

 

View solution in original post

1 Reply 1

SiBrasso
Level 1
Level 1

I have resolved this issue by doing the following:

 

Create the RADIUS servers:

 

radius server ISE01

 address ipv4 ###.###.###.### auth-port 1812 acct-port 1813

 timeout 10

 key ####

!

radius server ISE02

 address ipv4 ###.###.###.### auth-port 1812 acct-port 1813

 timeout 10

 key ####

 

Now create a group with those servers in

aaa group server radius VPDN-NewISE-Radz

 server name ISE01

 server name ISE02

 

Now create an authentication list with that group in

aaa authentication ppp NewISERadzAuthList group VPDN-NewISE-Radz none

 

Now add this authentication list to the Virtual-Template

interface Virtual-Template3

ppp authentication chap NewISERadzAuthList

 

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: